1. Commitment to Data Privacy
At StackandCode Inc. ("StackandCode", "we", "us", or "our"), privacy and data security are foundational principles. This Privacy Policy explains how our AI Project Management & Pod Orchestration Tool collects, processes, stores, and protects personal and technical data when you use our platform at pm.stackandcode.com and related services.
2. Information We Collect
We collect only the information necessary to provide autonomous project management and team orchestration:
- Account & Identification Data: Name, work email address, hashed passwords (bcrypt), profile avatar initials, and assigned workspace role.
- Workspace & Task Content: Client profiles, project scopes, task descriptions, urgency ratings, story points, sprint time logs, and attachments uploaded by your team.
- Credential Vault Data: API tokens and secrets explicitly entered into the Credentials Vault, protected by AES-256 encryption.
- Email Scope Parsing Inputs: Inbound client emails synced via Titan Mail IMAP strictly for requirements breakdown and sprint task generation.
- Telemetry & Presence: IP address, user-agent, last-seen timestamps, and active page context to power the Real-Time Presence Radar.
3. AI Processing & Zero Training Policy
When you utilize the AI Scope Parser, prompt payloads are transmitted securely via TLS 1.3 to enterprise AI model endpoints (OpenAI / Anthropic) with zero data retention for model improvement.
4. Multi-Tenant Isolation & Security Architecture
Our application implements strict multi-tenant boundaries. All database queries enforce organizational tenant IDs and L1-L4 role filters:
- Private tenant tasks and financial budgets are hidden from unauthorized staff and platform super-admins.
- All credential secrets are stored with symmetric AES-256 encryption at rest.
- Sessions are signed with cryptographic secrets and enforced through HTTP-only, SameSite cookies.
5. Your Data Rights (GDPR & CCPA)
Under global privacy regulations, you and your team have the right to:
- Access & Portability: Export all task logs, timesheets (CSV/Excel), and project records at any time.
- Rectification & Deletion: Request permanent erasure of your account, workspace, and stored attachments.
- Cookie Control: Manage cookie preferences anytime via our Cookie Preferences Modal.
6. Contact Privacy & Data Protection Officer
If you have questions regarding this Privacy Policy or wish to execute a Data Subject Access Request (DSAR), please contact our Data Protection Office:
Email: privacy@stackandcode.ai • stackandcode.ai@gmail.com
Address: StackandCode Global Systems Inc., Compliance & Security Division